This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/magpie.git
The following commit(s) were added to refs/heads/main by this push:
new 057f180a docs: use supported state flag in record fetch example (#1740)
057f180a is described below
commit 057f180a97d81216280d0ddd0f033e8eb766709d
Author: Masyarakat AI Indonesia - FMD <ma...@gmail.com>
AuthorDate: Wed Oct 21 04:18:39 2026 +0700
docs: use supported state flag in record fetch example (#1740)
* docs: use supported record fetch state flag
* fix(issue-sync): use --state-only in the push verify hint too
The sync push rule emitted the same unsupported `--jq` record-fetch command
the doc fix replaced; point it, and the eval fixture that quotes it, at
`--state-only`. Restore the list item's 3-space fence indent.
Generated-by: Claude Opus 5
---------
Co-authored-by: Masyarakat AI Indonesia - FMD <20...@users.noreply.github.com>
Co-authored-by: Jarek Potiuk <po...@apache.org>
---
plugins/magpie-security/skills/issue-sync/apply-and-push.md | 2 +-
tools/security-management/src/security_management/issue_sync/push.py | 2 +-
.../fixtures/case-5-clean-push-fix-released/report.md | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/plugins/magpie-security/skills/issue-sync/apply-and-push.md b/plugins/magpie-security/skills/issue-sync/apply-and-push.md
index 9c1bf4df..f01ff75c 100644
--- a/plugins/magpie-security/skills/issue-sync/apply-and-push.md
+++ b/plugins/magpie-security/skills/issue-sync/apply-and-push.md
@@ -521,7 +521,7 @@ the four gates that need judgement (trigger conditions, the incomplete-fix claus
```bash
uv run --project <framework>/tools/cve-tool-vulnogram/oauth-api vulnogram-api-record-fetch \
- --cve-id <CVE-ID> --jq '.body.CNA_private.state'
+ --cve-id <CVE-ID> --state-only
```
If that fetch entrypoint is not yet installed on the operator's machine (see [`tools/cve-tool-vulnogram/oauth-api/README.md`](../../../../tools/cve-tool-vulnogram/oauth-api/README.md)),
diff --git a/tools/security-management/src/security_management/issue_sync/push.py b/tools/security-management/src/security_management/issue_sync/push.py
index 4a7e8cd5..6dd948eb 100644
--- a/tools/security-management/src/security_management/issue_sync/push.py
+++ b/tools/security-management/src/security_management/issue_sync/push.py
@@ -176,7 +176,7 @@ def decide(data: Mapping[str, Any]) -> dict[str, Any]:
return out(
"pending",
"verify the state advance",
- next=f"uv run --project {oauth_api} vulnogram-api-record-fetch --cve-id {w(cve_id)} --jq '.body.CNA_private.state'",
+ next=f"uv run --project {oauth_api} vulnogram-api-record-fetch --cve-id {w(cve_id)} --state-only",
)
if fetched in LATER:
return out(
diff --git a/tools/skill-evals/evals/security-issue-sync/step-5b-judged-gates/fixtures/case-5-clean-push-fix-released/report.md b/tools/skill-evals/evals/security-issue-sync/step-5b-judged-gates/fixtures/case-5-clean-push-fix-released/report.md
index 47d11a6a..de30832b 100644
--- a/tools/skill-evals/evals/security-issue-sync/step-5b-judged-gates/fixtures/case-5-clean-push-fix-released/report.md
+++ b/tools/skill-evals/evals/security-issue-sync/step-5b-judged-gates/fixtures/case-5-clean-push-fix-released/report.md
@@ -32,5 +32,5 @@ asked to be credited. Not a follow-up to any earlier CVE.
Adapter session probe (`vulnogram-api-check`): `valid`.
`vulnogram-api-record-update`: exit 0 at 2026-10-03T14:12:09Z.
-`vulnogram-api-record-fetch --jq '.body.CNA_private.state'`: `"REVIEW"`
+`vulnogram-api-record-fetch --state-only`: `REVIEW`
(normalised: `review-ready`).